This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json) Hash identifier: 2sTX6pddDJCOrqyxn1H8jCtArVq1Oi1ylhEpWLDNgk0= Subject key identifier: 51:67:D4:BA:41:DC:8A:93:9E:29:88:2F:4F:1E:A4:1D:92:56:11:C4 Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019AF31BC17A21AAEA4C2EA00B81DA01F165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft Manifest number: 0CBD Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=) 2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: 8DteFVA8Pc+AnZH8FRGS+mtuhvsEfSFFKZqmVvmVuQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c1:7a:21:aa:ea:4c:2e:a0:0b:81:da:01:f1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=5167d4ba41dc8a939e29882f4f1ea41d925611c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:9c:b1:d2:ed:44:0e:90:94:43:de:9e:14: 71:a7:70:fa:e0:c0:34:3a:a7:20:89:d8:c6:3a:94: 0d:58:6a:25:69:5e:7a:72:d7:cf:35:ac:b6:e8:fb: cd:10:f7:2c:ac:f5:c1:98:35:27:96:8c:6a:d4:52: 61:64:56:cf:af:81:68:8d:dd:eb:a8:7b:43:86:56: 97:d2:96:96:e4:0a:b7:07:7d:e9:4e:56:54:91:a5: ea:71:63:fb:9b:54:d8:73:65:7e:2d:7b:c1:e9:bb: 0b:e3:70:96:f7:62:85:3a:cf:8a:08:30:99:13:b8: 03:61:01:ab:5d:9f:5f:42:6f:d9:8a:0e:de:9b:5b: ef:89:96:cd:cd:0a:db:41:4d:aa:05:e6:6f:23:31: 5f:32:1c:20:d1:c6:53:a0:1f:4e:0a:27:05:7e:eb: d4:90:be:ab:49:b7:d0:3b:1d:52:93:2e:1c:6f:ef: 0e:a6:0c:fa:e8:a3:12:98:43:51:0d:3c:bb:f9:83: ed:a3:80:f0:43:12:41:d2:6d:fd:b4:a9:aa:0f:f5: 80:af:f5:8a:e2:73:62:96:da:a2:f7:55:03:62:1c: 7a:94:68:96:1f:92:cc:72:c4:e6:eb:51:1e:6f:0d: 1a:a2:91:d1:dc:67:46:00:b0:69:42:5c:08:97:9d: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:67:D4:BA:41:DC:8A:93:9E:29:88:2F:4F:1E:A4:1D:92:56:11:C4 X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c2:15:f6:43:45:3d:22:98:82:a1:27:7c:02:92:0e:c4:55: d5:b2:c3:80:55:00:c8:df:e7:46:c2:ce:ab:2e:79:08:c1:6c: a7:4b:1e:97:e7:f3:1f:89:20:b3:4c:40:78:b0:d7:89:ff:dc: 4c:e4:80:e3:47:5f:de:ad:b0:40:67:2b:f0:1b:59:ba:6b:ad: 98:ab:ba:56:d0:b1:5a:c1:24:bc:82:6b:5e:c4:b1:b1:a8:91: 06:4f:8d:e4:75:fe:cb:2c:4d:63:15:4c:46:56:fb:50:42:fd: cf:27:9d:83:d0:be:5d:01:7d:cd:49:7d:08:06:e9:b1:3e:1f: 67:39:ad:d0:34:88:36:d8:20:df:82:b5:1e:80:e8:71:f3:21: 08:7a:22:a6:21:2d:a6:6e:b1:27:a2:51:c2:d5:a6:77:2c:ce: 58:0d:a6:00:2c:a2:03:03:86:58:97:9d:47:36:04:7d:49:a3: e5:9f:c8:5c:65:f9:d3:2c:6c:05:27:8d:35:b4:74:91:8d:62: 86:1a:74:4f:bd:c4:f0:b9:31:39:43:53:0f:be:6e:3f:c8:28: a4:26:c3:0e:4b:eb:91:d5:d9:11:1d:cf:00:4a:b4:13:c2:65: 62:be:c0:6c:71:ac:8f:44:89:96:85:e0:d8:46:11:3f:79:f5: b8:17:fb:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8F6IarqTC6gC4HaAfFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD Eyg1MTY3ZDRiYTQxZGM4YTkzOWUyOTg4MmY0ZjFlYTQxZDkyNTYxMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvWcsdLtRA6QlEPenhRxp3D64MA0 OqcgidjGOpQNWGolaV56ctfPNay26PvNEPcsrPXBmDUnloxq1FJhZFbPr4Fojd3r qHtDhlaX0paW5Aq3B33pTlZUkaXqcWP7m1TYc2V+LXvB6bsL43CW92KFOs+KCDCZ E7gDYQGrXZ9fQm/Zig7em1vviZbNzQrbQU2qBeZvIzFfMhwg0cZToB9OCicFfuvU kL6rSbfQOx1Sky4cb+8Opgz66KMSmENRDTy7+YPto4DwQxJB0m39tKmqD/WAr/WK 4nNiltqi91UDYhx6lGiWH5LMcsTm61Eebw0aopHR3GdGALBpQlwIl53PTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFn1LpB3IqTnimIL08epB2SVhHEMB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcIV9kNF PSKYgqEnfAKSDsRV1bLDgFUAyN/nRsLOqy55CMFsp0sel+fzH4kgs0xAeLDXif/c TOSA40df3q2wQGcr8BtZumutmKu6VtCxWsEkvIJrXsSxsaiRBk+N5HX+yyxNYxVM Rlb7UEL9zyedg9C+XQF9zUl9CAbpsT4fZzmt0DSINtgg34K1HoDocfMhCHoipiEt pm6xJ6JRwtWmdyzOWA2mACyiAwOGWJedRzYEfUmj5Z/IXGX50yxsBSeNNbR0kY1i hhp0T73E8LkxOUNTD75uP8gopCbDDkvrkdXZER3PAEq0E8JlYr7AbHGsj0SJloXg 2EYRP3n1uBf7JA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:31 2025 by rpki-client